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IN THE CLAIMS 
1-14. (cancelled). 

15. (currently amended) Ah A computer 
readable storage medium having an invalidity-monitoring 
program stored thereon, wherein said invalidity- 
monitoring program, when executed, monitors €^ 
monitoring invalid data which causes a computer to 
execute an invalid operation, said invalidity-monitoring 
program comprising: 

first software that acquires input/output data 
that is input or output over a network that is connected 
to said computer, or over an externally connected bus 
that connects said computer with an external device; 

second software that identifies ID information 
from said input/output data for identifying a user; 

third software that acquires at least part of 
user attribute data corresponding to said ID information 
from a user- information- storage unit that stores 
attribute information for all users having authorization 
to use said computer; 

fourth software that rcf crcncco determines 
whether said input/output data is invalid data by 
reference to a determination- rule -storage unit that 
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stores rules for determining whether said input/output 
data is invalid dataT — and dotorminco whether oaid 
input/output data is invalid data ; and 

fifth software that stops execution an 
operation executed by said input/output data when it ia 
dctGrmincd in oaid invalid data determination said fourth 
software determines that said input/output data is 
invalid data; 

wherein 

said determination- rule -storage unit stores 
determination rules that correspond to user attributes; 
and 

said fourth software determines that 
rcfcrcnccg, — in said determining of whether said 
input/output data is invalid data in accordance with— 
said determination rules that correspond to user 
attributes acquired by said third software attribute 
information acquired in the acquiaition of attribute 
information dctcrminco whether oaid input /output data ia 
invalid . 

16. (currently amended) The invalidity- 
monitoring program of claim 15, further comprising: 
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sixth software that references said user- 
information- storage unit and determines whether the user 
corresponding to said ID information has authorization to 
use said computer; and 

seventh software that stops operation by said 
input/output data when it is determined in the 
determination of authorization that there is no 
authorization to use said computer; 

wherein said sixth software that determines 
authorization of the user to use said computer porf orms 
this before execution of said third and fourth software 
it ia determined whether oaid input /output data is 
invalid data , and when the sixth software determines 4^ 
ia determined in the determining authorization that there 
is no authorization to use said computer, said program 
causes said computer to not execute at least one of the 
third and fourth software following ; — acquiring attribute 
information and oaid determination of whether paid 
input/output data io invalid data . 

17. (currently amended) The invalidity- 
monitoring program of claim 15, further comprising: 

sixth software that references a profile- 
storage unit that stores log data related to said 
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input/output data as profiles for each user, and compares 
input /output data that wao acquired by said first 
software in aaid data acquiaition with a normal operation 
trend of said user to determine whether operation is 
unusual ; and 

wherein said fifth software that stops an 
operation executed by said input/output data in aaid 
stopping operation executed by aaid input/output data 
also when it is determined by said sixth software in paid 
determining whether operation ia unuaual that that said 
operation is unusual. 

18. (currently amended) The invalidity- 
monitoring program of claim 15, further compriaing 
wherein said fifth software that executes a process of 
intermpting a session in aaid stopping of the operation 
executed by aaid input /output data when said first 
software acquires said input/output data ia aequirod from 
a network in aaid acquiaition of input/output data . 

19. (currently amended) The invalidity- 
monitoring program of claim 15, further compriaing 
wherein said fifth software that stops the a process e# 
executing executed by a driver in the atopping of the 
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operation executed by oaid input/output data when said 
first software acquires said input/output data is 
acquired from an externally connected bus in aaid 
acquiaition of input/output data . 

20. (currently amended) Aa A computer 
readable storage medium having an invalidity-monitoring 
program stored thereon, wherein said invalidity- 
monitoring program, when executed, monitors -fe^ 
monitoring invalid data which causes a computer to 
execute an invalid operation, said invalidity-monitoring 
program comprising: 

first software that acquires input /output data 
that is input or output over a network that is connected 
to said computer, or over an externally connected bus 
that connects said computer with an external device,- 

second software that identifies ID information 
from said input/output data for identifying a user; 

third software that acquires at least part of 
user attribute data corresponding to said ID information 
from a user- information- storage unit that stores 
attribute information for all users having authorization 
to use said computer; 
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fourth software that determines whether said 
input/output data is invalid data by reference to 
rcf GronoGO a determination- rule- storage unit that stores 
rules for determining whether said input/output data is 
invalid data-; — and determining whether oaid input/output 
data io invalid data ; and 

fifth software that notifies a terminal being 
operated by said user or administrator that an operation 
being executed by said input/output data is an invalid 
operation when it io dotcrminod in said determining said 
fourth software determines whether said input/output data 
is invalid that said input/output data is invalid data; 

wherein 

said determination- rule -storage unit stores 
determination rules that correspond to user attributes; 
and 

said fourth software determines that 
refcrGncco, — in said atop of determining whether said 
input /output data is invalid data— in accordance with 
said determination rules that correspond to user 
attributes acquired by said third software attribute 
information acquired in oaid otep of acquiring attribute 
information to determine whether oaid input /output data 
io invalid data . 
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21. (currently amended) An invalidity- 
monitoring method for monitoring invalid data, which 
causes a computer to execute an invalid operation, 
comprising: 

acquiring, by said computer, input/output data 
that is input or output over a network that is connected 
to said computer, or over an externally connected bus 
that connects said computer with an external device; 

identifying, by said computer, ID information 
from said input /output data for identifying a user; 

acquiring, by said computer, at least part of 
attribute data corresponding to said ID information from 
a user- information- storage unit that stores attribute 
information for all users having authorization to use 
said computer; 

referencing, by said computer, a determination- 
rule- storage unit that stores rules for determining 
whether said input /output data is invalid data; 

determining , by said computer, whether said 
input/output data is invalid data based on said rules; 
and 

stopping, by said computer, execution an 
operation executed by said input/output data when it is 



-10- 



Application Serial 
No. 10/579,668 



determined in said invalid data determination otcp that 
said input/output data is invalid data; 

wherein 

said determination- rule -storage unit stores 
determination rules that correspond to user attributes; 
and 

in said step of determining of whether said 
input/output data is invalid data, referencing said 
determination rules that correspond to user attributes 
acquired in said acquiring of attribute information 
attribute information acquired in said atop of acquiring 
attribute information to determine whether said 
input /output data is invalid. 

22 . (currently amended) An invalidity- 
monitoring method for monitoring invalid data, which 
causes a computer to execute an invalid operation, 
comprising: 

acquiring, by said computer, input/output data 
that is input or output over a network that is connected 
to said computer, or over an externally connected bus 
that connects said computer with an external device; 

identifying, by said computer, ID information 
from said input /output data for identifying a user; 
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acquiring, by said computer, at least part of 
attribute data corresponding to said ID information from 
a user-information-storage unit that stores attribute 
information for all users having authorization to use 
said computer; 

referencing, by said computer, a determination- 
rule- storage unit that stores rules for determining 
whether said input/output data is invalid data; 

determining by said computer whether said 
input/output data is invalid data based on said rules ; 
and 

notifying, by said computer, a terminal being 
operated by said user or administrator that an operation 
being executed by said input/output data is an invalid 
operation when it is determined in oaid otcp of 
dotormining whether oaid input/output data ia invalid 
that said input /output data is invalid data; 

wherein 

said determination- rule -storage unit stores 
determination rules that correspond to user attributes; 
and 

in said stop of determining of whether said 
input/output data is invalid data, referencing said 
determination rules that correspond to user attributes 
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acquired in said acquiring of attribute information 
attribute information acquired in oaid otop of acquiring 
attribute information to determine whether said 
input /output data is invalid. 

23. (currently amended) An invalidity- 
monitoring system for monitoring invalid data, which 
causes a computer to execute an invalid operation, the 
system comprising: 

a computer having a connection to a network or 
to an external device; 

a data-acquisition mechanism for acquiring 
input/output data that is input or output over the 
network that is connected to said computer, or over an 
externally connected bus that connects said computer with 
the external device; 

an ID-information-identifier for identifying ID 
information from said input/output data for identifying a 
user; 

a user- information- store for storing attribute 
information for all users having authorization to use 
said computer; 

an attribute- information^acquisition mechanism 
for acquiring at least part of the attribute data 
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corresponding to said ID information from said user- 
information- store; 

a determination-rule- store for storing rules 
for determining whether said input/output data is invalid 
data ; 

an invalid-data-determination mechanism for 
referencing said determination-rule-store, and 
determining whether said input/output data is invalid 
data ; and 

a stoppage mechanism for stopping execution an 
operation executed by said input/output data when it is 
determined by said invalid- data -determination mechanism 
that said input /output data is invalid data; 

wherein 

said determination- rule -store stores 
determination rules that correspond to user attributes; 
and 

said invalid-data-determination mechanism 
references said determination rules that correspond to 

attribute information acquired by said attribute- 
information-acquisition mechanism to determine whether 
said input /output data is invalid. 
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24. (currently amended) The invalidity- 
monitoring system of claim 23 further comprising: 

a use-authorization-determination mechanism for 
referencing said user- information- store and determining 
whether the user corresponding to said ID information has 
authorization to use said computer; 

wherein 

said stoppage mechanism also stops operation 
executed by said input/output data when it is determined 
by said use-authorization-determination mechanism that 
there is no authorization to use said computer; 

said use-authorization-determination mechanism 
is activated before said attribute information- 
acquisition mechanism and said invalid-data-determination 
mechanism; and 

when it is determined by said use- 
authorization-determination mechanism that there is no 
authorization to use said computer, at least one of the 
following; said attribute- information-acquisition 
mechanism or said invalid-data-determination mechanism 
does not execute . 

25. (previously presented) The invalidity- 
monitoring system of claim 23 further comprising: 
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a profile-store for storing log data related to 
said input/output data as profiles for each user; and 

an unusual-operation-determination mechanism 
for referencing said profile-store and comparing 
input /output data that was acquired by said data- 
acquisition mechanism with the normal operation trend of 
said user to determine whether operation is unusual; 

wherein said stoppage mechanism also stops an 
operation executed by said input/output data when it is 
determined by said unusual -operation- determination 
mechanism that operation is unusual. 

26. (previously presented) The invalidity- 
monitoring system of claim 23, wherein said stoppage 
mechanism executes a process of interrupting a session 
when said data-acquisition mechanism acquired said 
input /output data from a network. 

27. (currently amended) The invalidity- 
monitoring system of claim 23, wherein said stoppage 
mechanism stops a process of cxocuting executed by a 
driver when said data-acquisition mechanism acquired said 
input/output data from an externally connected bus. 
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28. (currently amended) An invalidity- 
monitoring system for monitoring invalid data, which 
causes a computer to execute an invalid operation, the 
system comprising: 

a computer having a connection to a network or 
to an external device; 

a data- acquisition mechanism for acquiring 
input /output data that is input or output over the 
network that is connected to said computer, or over an 
externally connected bus that connects said computer with 
the external device; 

an ID-information-identification mechanism for 
identifying ID information from said input/output data 
for identifying a user; 

a user- information- store for storing attribute 
information for all users having authorization to use 
said computer; 

an attribute- information^acquisition mechanism 
for acquiring at least part of the attribute data 
corresponding to said ID information from said user- 
information- store ; 

a determination-rule- storage mechanism for 
storing rules for determining whether said input/output 
data is invalid data; 
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an invalid-data-determination mechanism for 
referencing said determination- rule -storage mechanism 
determination rule atorc , and determining whether said 
input /output data is invalid data; and 

a notification mechanism for notifying the a 
terminal being operated by said user or administrator 
that an operation being executed by said input/output 
data is an invalid operation when it is determined by 
said invalid-data-determination moana mechanism that said 
input /output data is invalid data; 

wherein 

said determination-rule-storage mechanism 
stores determination rules that correspond to user 
attributes; and 

said invalid- data -determination mechanism 
references said determination rules that correspond to 
attribute information acquired by said attribute- 
information-acquisition mechanism to determine whether 
said input/output data is invalid. 
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